In the ongoing, years-long group text between my four brothers and sister, there was a brief exchange the Saturday before ...

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

The FOSS well apparently never runs dry—here’s the next round of this roundup.

Lam Wing-kee, a former Hong Kong bookseller and symbol of resistance to Beijing's crackdown on free speech, has died in ...

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in ...

Learn how to permanently and securely delete files on Linux using shred, fstrim, secure-delete, and btrfs snapshot removal.

Microsoft says hotel phishing emails are using Calendly links and photo ZIP files to drop the TonRAT Node.js implant on front ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

While using the macOS 27 Golden Gate beta, I stumbled upon a helpful little new feature in Apple’s Numbers, Pages, and TextEdit apps: these apps can recommend names for nearly-created files. When you ...